Elevate your security skills with the Prisma Access SASE Security: Design and Operation (EDU-318) course. Learn to adeptly configure, operate, and optimize the Prisma Access solution, ensuring comprehensive protection for remote networks and mobile users across diverse environments from the cloud.




Cortex XSOAR: Automation and Orchestration (EDU-380)

The course participants will delve into setting up integrations, designing tasks, creating playbooks, and constructing efficient incident layouts for better triage and investigation.

It covers categorizing event data, developing automations, managing indicators, and organizing user roles, all aimed at improving security operations. Designed for professionals focused on advancing security efficiency, this training blends theory with hands-on demos, equipping attendees with essential skills for orchestrating security responses in today’s dynamic cyber environment.


Before attending, participants should finish the Cortex XSOAR Analyst digital learning module. Those with a background in scripting, especially in Python and JavaScript, and familiarity with JSON data objects, may find it easier to assimilate the course content. Nonetheless, the ability to write code is not a prerequisite for completing the course.


Level: Advanced

Duration: 4 Days

Format: Instructor-Led Training

Supported Platforms: Cortex XSOAR

Target Audience

The course is ideal for Security Operations (SecOps) personnel, Security Orchestration, Automation, and Response (SOAR) engineers, Managed Security Service Providers (MSSPs), Service Delivery Partners, System Integrators, and Professional Services Engineers.

Best Practices

As an Authorized Training Partner, Datacipher is renowned for its superior training programs. Our trainers are more than educators; they are seasoned experts and security consultants who engage daily with Palo Alto Networks solutions, particularly Cortex XSOAR. They leverage their extensive practical experience to enrich the course, focusing on the tangible application of automation and orchestration principles.




Can the EDU-380 course be taken online?

Absolutely. Our online training is led by expert instructors using web conferencing tools, official materials, whiteboarding, and live demos. Participants also access personal labs for practical experience.

Is in-person classroom training available?

Yes, we host in-person classes at our facilities and offer customized on-site training. Check our “Price and Dates” section or contact us for details.

Will I get official course materials?

Participants receive official course materials in electronic or printed form, including detailed slides and recordings of the training sessions. For printed materials, ensure booking is confirmed at least ten days in advance.

Can I print the electronic coursebook?

Yes, the electronic coursebook is printable, offering flexible study options.

Do participants receive a certificate of completion?

Upon completion, participants receive an official Palo Alto Networks certificate, acknowledging their achievement.

Exam Resources



Study guide

Sample Questions

Course Outline

Module 1 – Cortex XSOAR Functionality and Feature Sets
Module 2 – XSOAR Integrations
Module 3 – Playbooks
Module 4 – Classification and Mapping
Module 5 – Layout Builder
Module 6 – Solution Architecture
Module 7 – Docker
Module 8 – Automation Development & Debugging
Module 10 – Indicators and Threat Intelligence Management
Module 11 – Jobs and Job Scheduling
Module 12 – Users and Role-Based Access Controls (RBAC)
  • Select Time Zone
    Americas Date and Time
    Asia Date and Time
    Europe Date and Time

Training Credits/Participant: 40

Payment Methods

We accept all common payment methods in both the Euro and US Dollar as well as Palo Alto Networks training credits and vouchers for this Firewall: Troubleshooting (EDU-330) training course.

  • Training Credits and Vouchers from Palo Alto Networks – We accept both training credits and training vouchers issued by Palo Alto Networks. To sign-up for a course and pay using training credits or vouchers, please use the Register button above. You can select training credits at the end of the registration form.
  • Purchase Order “PO” – If your company wants to raise a purchase order to book a training course, please sign-up using the register button above. At the end of the form, please answer the questions “How would you like to pay for the course?” with “My company will pay for it, please send me an invoice with the payment details”. Our training team will then send you an official quote which your company can use to issue the PO. Our training team will also be able to provide any additional information that might be required by your accounts department.
  • Bank Transfer – Consigas has a bank account both in the US and in Europe. Our banks support all common bank transfer methods like IBAN/BIC, Swift, ACH or wire transfer. To sign-up for a course and pay per bank transfer, please use the Register button above.
  • Credit Card – We can accept credit card payment from all major credit card companies like Mastercard, VISA, American Express, Discover & Diners or Cartes Bancaires. You can pay per credit card either directly through the registration link above, or we can issue an invoice with a web link to pay online. All credit card transactions are secured by Stripe and Consigas is not storing any credit card details.


Guaranteed to Run Training Courses
Guaranteed to Run – Consigas guarantees to run this Firewall Configuration and Management (EDU-210) class, exempt in unexpected circumstances of force majeure, like an accident or illness of the instructor, which prevents the course from being conducted.

Guaranteed on next Course Booking
Guaranteed on next Booking – Consigas guarantees to run this Firewall Configuration and Management (EDU-210) class if one more student registers for the training course.

Guaranteed on next Course Booking
Scheduled Class – Consigas has scheduled this Firewall Configuration and Management (EDU-210) training course and booked an instructor. We rarely cancel any classes because of low inscriptions and provide a “Cancel no more than Once” guarantee. This means that in the rare case that we cannot run a class because of low inscriptions, we guarantee running the next course regardless of the number of attendees.

Training Course Sold Out
Sold Out – This class is fully booked. Please contact us using this form and we will put you on the waiting list or let you know in case we schedule an additional class.

Half and Full-Day Training
We are offering training courses both in the classical full-day as well as in a half-day format. The half-day classes are specially tailored for IT professionals who cannot afford to leave the office for several days in a row. This format allows students to attend and fully focus on the course for a couple of hours and then catch up with their day-to-day job.The training content of both schedule formats is exactly the same. The only difference is that half-day classes distribute the course over a longer period of time. Consigas is running training courses in a half-day format for many years, and we have received very positive feedback from customers. Students tell us that besides being more flexible, it also enables them to learn more effectively as it gives them more time to process all information resulting in a better understanding.

Upon completing the intensive EDU-380 course on Cortex XSOAR: Automation and Orchestration, participants will emerge with a comprehensive understanding of setting up integrations, task design, playbook creation, and the development of effective incident layouts for improved triage and investigation processes.



Become An Expert By Practice – Get Your Hands On Labs

Don’t let your tech outpace the skills of your people


Dedicated to excellence, we cultivate strong partnerships with worldwide technology innovators.


What Our Clients Say